Task RX LLC Privacy Policy

1. Who controls your information

We determine how information is used to administer Task RX accounts, operate the public marketplace, respond to inquiries, maintain security, and manage our own business relationships. For those activities, Task RX LLC acts as the controller or business where those terms apply.

A service business decides what customer, employee, contractor, and project information to enter into its Task RX account and how to use that information for its own operations. When we process that information on the business's instructions, we act as its processor or service provider, subject to applicable law and any applicable data processing agreement. A business may also collect information directly from you under its own privacy notice. These roles depend on the actual activity; entering information into Task RX does not automatically make every activity processing on behalf of a business.

If your request concerns records controlled by a service business, contact that business first. You may also contact us at info@taskrxapp.com. We will address information we control and assist or route requests concerning business-controlled records as appropriate. Separate providers may control information they collect for their own payment, legal compliance, fraud prevention, or other purposes.

For Recruiting, the hiring business controls its job advertisements, applicant review, employment decisions and hiring records. We process applications and resumes on its behalf to provide the recruiting software. Task RX controls information used for its own public-board administration, abuse prevention, support and recruiting-service inquiries. Any separately arranged recruiting assistance must identify the parties' roles and permitted information uses; it does not automatically make all applicant information Task RX's independent business data.

2. Information you provide and records the Services generate

Account and business information includes names, email addresses, credentials and authentication records, business names, contact details, settings, preferences, roles, invitations, and access permissions. Business profiles may include a description, services, service areas, contact details, photos, gallery items, and reviews.

Customer and project information includes client and contact records, job locations, estimates, invoices, line items, pricing, taxes, deposits, payment records, agreements and templates, electronic approvals or signatures, projects, tasks, schedules, change orders, notes, follow-ups, and historical records. We also process uploaded documents, photos, receipts, expense descriptions, amounts, dates, vendor details, and other information you choose to enter. Files and free-text fields may contain personal information about other people.

Workforce information includes worker identity and contact information, invitations and account associations, crews, assignments, schedules, time zones, clock-in and clock-out events, breaks, general work sessions, timesheets, correction requests, manager decisions, and related history. A business may enter labor rates and costs. Access to these fields depends on the user's role and the permissions available in the product.

Public marketplace requests include your name, email address, telephone contact information, selected services, city, state, ZIP code, work description, timeframe, optional budget, and photos you provide. The public request form uses city, state, and ZIP code rather than requiring a street address. You may later provide a service address directly to a business or in a business record. Reviews include the rating, review text, reviewer information, and related moderation records.

Support and communications information includes messages, feedback, contact-form submissions, and information needed to respond to or deliver those communications. Payment and subscription information is described in Section 6. AI and voice information is described in Section 5.

Recruiting information includes employer-supplied job titles, descriptions, qualifications, worksite ZIP codes, location descriptions, compensation and application instructions; applicant names, email addresses, optional phone numbers, professional experience, messages and resumes; and application status, job-related employer notes, privacy acknowledgments and audit history. Resumes may contain work history, education and qualifications. Provide only relevant professional information, not SSNs, birth dates, government IDs, banking details, medical information or protected demographic information. Public job searches process the ZIP and filters you enter; they do not require your device's precise location. Radius results use approximate straight-line ZIP reference-point distances, not driving distances or commute times.

Recruiting-service inquiries include the position, hiring location, compensation, skills, experience, timeline, requested assistance and business/submitter contact details. Selecting background-check or drug-testing assistance records interest only; it does not order a check or collect a screening result through this workflow.

Direct Mail Marketing inquiries include business and contact details, mailing quantities and dimensions, selected ZIP codes, demographic targeting preferences, design selections, campaign messages and instructions, and related communications. Demographic selections describe a requested audience; they do not establish that Task RX has verified a visitor's demographics or sells mailing-list data. Website-project inquiries include the existing website, requested scope/package, purposes, budget if supplied, timeline and project details. Logos and any artwork provided through an agreed channel may also contain personal information. Do not send passwords, payment credentials or sensitive personal records in a quote request.

3. Cookies, device storage, and technical information

When you use Task RX, we and our service providers collect information such as your IP address, browser and device details, request times, sign-in activity, errors, and security information. We use this information to operate the Services, protect accounts, prevent abuse, and diagnose problems.

We use cookies and device storage to keep you signed in, remember preferences, and make business information available on your device, including for offline use. Locally saved information may remain on a device after a session ends. Use trusted devices, protect access to shared devices, and manage stored information through your browser or device settings. Clearing stored information can affect access to locally saved records.

Resources supplied by third parties, such as fonts, may send those providers your IP address and browser information when loaded. Our provider notices identify relevant providers. You can manage cookies, storage, and device permissions in your browser or device settings, although blocking essential technologies may prevent sign-in or other functions.

If we use optional analytics or advertising technologies, we will provide the disclosures and consent or opt-out choices required by applicable law. A notice alone does not replace any consent that the law requires.

4. Why we use information and who receives it

We use information to provide and administer Task RX; authenticate users and apply access permissions; store and share business records; connect customers with service businesses; display profiles and reviews; support timekeeping, expenses, schedules, and reporting; provide requested AI assistance; administer payments and subscriptions; answer support requests; prevent fraud and abuse; investigate problems; enforce agreements; and meet legal obligations. Product improvement must remain consistent with this Policy, business instructions where applicable, and any required legal basis.

Within a business account, authorized owners, managers, employees, and other users can access information according to their roles and permissions. A worker may be associated with more than one business; each business receives information relevant to its own authorized relationship.

Businesses receiving a marketplace request can receive your contact details, work description, service area, and submitted photos. A request may reach more than one participating business. A request directed to a particular business may be shared with that business. Recipients may retain the information they receive and respond under their own privacy practices.

Business profiles, galleries, reviews, and other material designated for publication may be viewed publicly, copied, or indexed by search engines. Estimate and invoice links disclose the document and related customer information to people who have the link. Recipients may forward links or save copies, so share them carefully.

Public estimate and invoice links provide 30 days of access, with the exact deadline shown on the document and in its email notice. Download, print, or save a copy before that date. A new link has its own deadline and does not extend an older link. After expiration, the document, customer details, and attachments are no longer available through that link, and payment or estimate acceptance/signature actions are unavailable. Expiration does not delete the business’s stored records, signatures, payments, or audit history. The business determines how long its estimate is contractually valid; this access period does not set that validity.

We share information with providers that support hosting, data and file storage, email delivery, AI, subscriptions, payment processing, and payroll services, as needed for those functions and subject to applicable agreements. These include Vercel, Neon, Resend, and the service providers described below. A provider may also process information for its own legal, security, or other independent purposes under its privacy notice.

When you choose an external service, we share information needed for the service you request and within the authorization you provide. We may disclose information to advisers, authorities, or other parties when reasonably necessary for legal compliance, valid legal process, fraud prevention, protection of rights or safety, or legal claims.

Information may be transferred in a financing, reorganization, merger, acquisition, or sale of assets, subject to applicable law and appropriate confidentiality protections. Such a transaction does not authorize unrestricted new uses of your information.

Our service license does not authorize unrelated advertising or general AI model training on private business records. Whether a disclosure is considered a sale, sharing, targeted advertising, or processing on a business’s behalf depends on applicable law and the arrangement. Where an opt-out right applies, contact info@taskrxapp.com. We honor legally required choices and recognized preference signals and do not treat this Policy as consent to processing that requires separate consent.

Published job information and the hiring business's displayed name are public. Applications, resumes, employer notes and hiring statuses are not public job-board content. They are available to the hiring business's authorized users through restricted workflows. Authorized Task RX administrators may access recruiting records for legitimate administration, moderation, support or legal purposes, subject to access controls; this does not give every business access to other businesses' candidates. Employer communications or copies outside Task RX follow the recipient's own practices.

We use business-service inquiry information to prepare and manage quotes, contact the requester and maintain request history. If a separately agreed campaign or website project proceeds, information needed for that work may be shared with the printing, mailing, design, hosting or other fulfillment provider identified for the engagement. A quote request alone does not authorize unrelated marketing or unrestricted disclosure of private business records.

The Services page links to independent Thimble and ERGO|NEXT insurance offerings through referral/affiliate links. Task RX may receive referral compensation. Following a link takes you to an external service that may receive referral and technical information and collect the details you submit under its own privacy notice. The current links do not automatically send your Task RX business book, applicant records or payroll information to an insurer. Review that provider's notice before entering information.

5. Task RX AI and voice processing

Task RX AI uses OpenAI to help answer questions, prepare content, and assist with supported business activities. When you use it, we process your messages, responses, and relevant information you are authorized to access, such as information about the current Task RX screen, clients, estimates, invoices, projects, and schedules. This information may be shared with the AI provider as needed to fulfill your request. Task RX AI does not thereby gain unrestricted access to your records, unrelated applications, or everything on your device.

When you enable voice interaction, your microphone audio and resulting text are sent to OpenAI to recognize speech and provide spoken replies. Microphone permission is required. You can stop voice interaction or revoke permission through device settings. Revoking permission stops or limits future collection but does not automatically delete information already processed. Speech recognition may misunderstand names, amounts, or instructions. Task RX does not activate voice recording unless you initiate a supported voice interaction and grant the required microphone permissions.

Ordinary AI conversations are not kept by Task RX as a permanent chat history or audio recording. We do retain information needed for usage administration, security, support, and records of actions you request. Those records may contain your instructions, confirmation details, relevant business information, and the result of an action. Business records created or changed with AI assistance remain subject to the same retention and deletion rules as other business records. Ending a conversation does not delete them.

AI providers may retain information under their applicable agreements, privacy practices, service settings, and legal obligations. We do not promise zero provider retention. OpenAI states that business API data is not used to train its models by default unless the account holder opts in. Our limited service license does not authorize general model training on customer content. A materially different use would require an appropriate legal basis, notice, and consent where required.

You can choose not to use Task RX AI and can manage microphone permission separately. Free includes 15 minutes of voice use per month, Pro includes 120 minutes, and Enterprise limits are custom. Text assistance is included on Free and Pro subject to applicable usage limits. Ordinary business tools remain available separately from optional AI assistance.

AI output may be inaccurate, incomplete, biased, or similar to another person’s output. Review generated information and important actions before relying on them. Do not submit payment account numbers, government identifiers, health information, or other highly sensitive information unless a supported feature requires it and you have authority to provide it. Voice interaction is not offered as voiceprint identification or biometric authentication.

6. Payments and subscriptions

Task RX Payments uses Stripe for payment processing and business account onboarding. Stripe may collect identity, business, verification, tax, bank-account, payment-card, fraud-prevention, dispute, transaction, and payout information through its designated services. Stripe’s privacy notice and applicable agreements govern its handling of that information.

Task RX receives and processes the account and transaction information needed to provide payment features and maintain business records. This can include business account references, onboarding or verification status, invoice and payment amounts, transaction references, fees, payment status, refunds, disputes, and related payout information. Task RX does not receive or store full card numbers or bank login credentials through the designated payment flow. Payment and financial records may be retained after a public document link expires, as described in Section 8.

Use designated payment services for sensitive payment information. Do not place full card numbers, bank credentials, or identity documents in ordinary notes, uploads, or AI messages. A business may provide an external payment link, such as a PayPal link; following it takes you to that provider, whose terms and privacy practices apply.

For software subscriptions, Task RX and its subscription-support provider, RevenueCat, may process an account identifier, purchase or receipt details, selected plan, transaction history, subscription status, renewal or expiration dates, and related technical information. Apple App Store, Google Play, or another billing provider identified at purchase handles the purchase under its own rules and privacy practices. We receive information needed to provide and support purchased access. Software subscription purchases are separate from customer payments to a service business and from payroll charges.

7. Task RX Payroll and location information

Task RX Payroll is an optional service provided through SurePayroll by Paychex. Customers may provide business, employee, financial, tax, and other information directly to SurePayroll to obtain payroll services. SurePayroll processes that information under its applicable privacy policy and customer agreements.

Task RX may process or access payroll-related enrollment, account, billing, and support information as necessary to provide and support the service, subject to applicable permissions and agreements. Authorized Task RX administrators may also have access to employee or other sensitive payroll records where the payroll service’s permissions allow it for authorized administration or support. Such access is limited to authorized purposes and does not permit unrelated use of worker information. Our public website’s general contact form is not intended for SSNs, payroll banking information, or tax documents.

Businesses are responsible for lawful worker instructions, required notices, and information they submit. You can contact info@taskrxapp.com about Task RX’s payroll-related handling or to help direct a request to the responsible business or provider. SurePayroll’s separate privacy practices do not remove Task RX LLC’s own obligations.

Mileage features on supported mobile devices may process location and motion information to detect trips, classify Business/Personal travel, and connect business mileage with a project or general business activity. Automatic tracking requires the applicable permissions. With background location enabled, collection may occur while the app is not open. The feature notice explains when collection occurs, who can see saved information, and how to stop tracking. Personal travel should remain separate from business project records.

Manual mileage records contain information you choose to enter. Manage location permissions in device settings or use the available tracking controls. Revoking permission stops or limits future collection but does not automatically erase saved records. Businesses must provide required workplace notices and obtain lawful authorization for worker tracking. ZIP-code matching and entered addresses do not imply continuous GPS tracking. When a worker opts in for a clock action and grants device permission, timekeeping may save a location observation, including coordinates, accuracy or an unavailable/permission status, with that clock event. This is separate from automatic mileage and is not continuous employee tracking. Authorized users can review the observations in the relevant timekeeping history.

8. Retention and deletion

We retain information for as long as reasonably needed to provide the Services and fulfill the purposes described in this Policy, considering account activity, business instructions, contract performance, required recordkeeping, security, disputes, and legal obligations. Different records may have different retention periods. Business records, including payment, signature, employment, and audit records, can remain available as history until appropriately deleted. Expiration of a public link does not delete the underlying records.

Account owners can request deletion through Settings, subject to authentication and confirmation, or contact info@taskrxapp.com. When a business owner completes the authorized account-deletion process, the associated business data is deleted, including Recruiting job postings, applications and resumes, and associated access ends. Stored-file cleanup and removal of other copies may take additional time. An employee’s deletion request does not automatically erase employment records controlled by a business.

Deleting your Task RX account does not automatically cancel an active subscription purchased through the Apple App Store, Google Play, or another billing provider. Subscriptions must be cancelled through the applicable billing provider or available subscription-management tools.

Information may remain where required or permitted by law, subject to a legal hold, needed for a dispute or security purpose, or held in provider systems and backups until applicable retention periods end. Information retained for those purposes remains protected and limited to the relevant purpose. Other businesses or recipients may retain copies they independently received, including marketplace requests they are authorized to use.

We do not promise immediate deletion of every copy. You can request access, export, correction, or deletion as described below. Deleting an app, ending an AI conversation, or disconnecting a service is not the same as deleting an account or cancelling a separate subscription.

A job posting's expiration or closure stops its public availability and new applications; it does not automatically delete historical applications, resumes or audit history. While the business account remains active, applicant-management deletion controls use a two-year retention period, extended by applicant-record updates, and check legal holds. These controls do not promise that Task RX will preserve Recruiting records after the business owner deletes the account. Account deletion removes the associated Recruiting job postings, applications and resumes through the separate account-deletion process. Employer-held copies and external provider records may follow separate retention requirements.

9. Your choices and privacy rights

You can update available account fields, use Download my data in Settings, request account deletion, manage device permissions, or contact info@taskrxapp.com. Export scope depends on your role and the data you are authorized to access. Keep any required business records before deleting an account. For marketplace information or copies held by a recipient business, contact us and, where appropriate, the recipient.

Depending on applicable law, you may have rights to access or know about personal information, correct it, delete it, receive a portable copy, withdraw consent, restrict or object to processing, opt out of sale, certain sharing, targeted advertising, or certain profiling, or limit certain uses of sensitive information. Where a law provides an appeal, you may appeal a denied request by emailing info@taskrxapp.com with the subject Privacy appeal. You may complain to the competent regulator. We will not unlawfully discriminate against you for exercising a privacy right.

We may verify identity and authority using information reasonably needed for the request. Authorized agents may submit requests where permitted by law. We will respond within applicable statutory periods and explain any permitted extension or denial. We will not require unnecessary sensitive information or impose an arbitrary once-per-year limit on deletion requests. If a request concerns information processed for a business, we will assist that business according to applicable law and our obligations.

If marketing messages are offered, you may opt out using the message instructions or by contacting us. Necessary account, security, transaction, or service messages may continue. Providing contact information for a service request does not authorize unrelated advertising or unrestricted marketing by recipient businesses.

Job seekers can direct requests about an application to the hiring business or contact info@taskrxapp.com for assistance. You do not need a Task RX business subscription to make a privacy request. We address information we control and help route or fulfill requests concerning employer-controlled records, subject to identity/authority verification, applicable law and lawful retention requirements. Removing a public posting does not itself fulfill an applicant deletion request.

10. Regional processing and international transfers

Where European or UK data protection law applies, we rely, as applicable, on performance of a contract with you or steps you request before a contract; legal obligations; legitimate interests in operating, securing, and supporting the Services where those interests are not overridden by your rights; or consent for processing that requires it. A contract with an employer does not automatically provide the contractual legal basis for processing each employee's information. We process business-controlled records on documented instructions under the applicable processing arrangement.

Applicable rights can include access, correction, erasure, restriction, objection to legitimate-interest processing and direct marketing, and portability for information you provide where processing is automated and based on consent or a contract. Withdrawing consent does not affect prior lawful processing. Where applicable, you also have protection against solely automated decisions with legal or similarly significant effects and may request information about such processing. AI assistance and marketplace matching are not permission to make unlawful employment, credit, or other consequential decisions about individuals.

Our providers may process information in the United States and other countries. Where a restricted international transfer occurs, the applicable legal transfer mechanism and safeguards must be used. Continued use alone is not a substitute for those safeguards. Contact info@taskrxapp.com for information about applicable transfer arrangements or representatives.

11. Security and children

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and authentication appropriate to the Services. No service can guarantee absolute security. Protect your credentials, use trusted devices, and report suspected unauthorized access to info@taskrxapp.com. We will address incidents and provide notifications when applicable law requires them.

The Services are not directed to children under 13. If we learn that we collected personal information directly from a child under 13 without legally required authorization, we will take appropriate steps, including deletion where required. Businesses must have lawful authority for any records involving minors and must comply with applicable employment and privacy requirements. This Policy is not an authorization to use the Services for children's regulated data.

12. Changes and contact

We may update this Policy to reflect changes in the Services or applicable law. We will identify the effective date and provide additional notice or obtain consent when required. A revised notice does not retroactively authorize an incompatible use of previously collected information.

For privacy questions, requests, appeals, or security concerns, contact Task RX LLC at info@taskrxapp.com.

Provider terms and privacy notices

These official references describe the providers’ services and privacy practices. Applicable agreements depend on the services you use. They do not remove Task RX LLC’s obligations or imply endorsement.

OpenAI’s business services agreement governs Task RX’s relationship with OpenAI; it does not automatically become a contract with Task RX customers. SurePayroll’s website terms do not replace the customer Payroll Service Agreement presented during payroll enrollment.